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DETAILED ACTION 
EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Eric G. King (Reg. No. 42,736) on 02/12/2009 and 02/20/2009. 

The application has been amended as follows: 

6. (Currently Amended) An apparatus comprising: 

a hardware security machine configured to secure exchanges between a 
client machine and a server machine of a computer system, 
wherein a first protocol used between the client machine and server 
machine is a non-secure stateless protocol, and a second protocol 
implemented between the client machine and said security machine 
is a secure stateless protocol, wherein said security machine 
further comprises an analyzer configured to insert an unmodified 
certificate received from the client machine using said second 
secure stateless protocol into a cookie header of an HTTP or 
equivalent request, and further configured to transmit to a server 
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said unmodified certificate contained in said cookie header using 

said first non-secure stateless protocol; and 
wherein said cookie header of said request includes a plurality of cookies; 
transmitting said unmodified certificate from the client machine to said 

security machine using said second secure stateless protocol; 
inserting, said certificate unmodified into a cookie header of a reguest in 

the first non-secure stateless protocol, the inserting being done by 

the analyzer ; 



7. (Currently Amended) A system comprising: 
a client machine; 
a server machine; and 

a hardware security module interposed between the client machine and 
the server machine and provided in communication therewith; 

wherein the client machine and the server machine are configured to 

communicate using a first protocol, said first protocol comprising a 
non-secure stateless protocol; 

wherein the client machine and the security module are configured to 
communicate using a second protocol, said second protocol 
comprising a secure stateless protocol; and wherein the security 
module comprises an analyzer configured to insert an unmodified 
certificate sent by the client machine into a cookie header of a 
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request in conformance with said non-secure stateless protocol, 
and wherein the analyzer is further configured to transmit to a 
server said unmodified certificate contained in said 
cookie header using said non-secure stateless protocol, said cookie 
header of said request including a plurality of cookies; 

transmitting said unmodified certificate from the client machine to said 
security machine using said second secure stateless protocol: 

inserting, said certificate unmodified into a cookie header of a request in 
the first non-secure stateless protocol, the inserting being done by 
the analyzer : 



2. An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to CHINWENDU C. OKORONKWO whose telephone 
number is (571 )272-2662. The examiner can normally be reached on MWF 2:30 - 6:00, 
TR 9:00-3:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on (571) 272 4195. The fax phone 
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number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/C. C. O.I /Nasser G Moazzami/ 

Examiner, Art Unit 2436 Supervisory Patent Examiner, Art 

Unit 2436 



